Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/600d62a4-e5e5-46cd-9b8b-9a7f3ddeac2d.roa
File:                     600d62a4-e5e5-46cd-9b8b-9a7f3ddeac2d.roa (raw, json)
Hash identifier:          bquG0xFLwCaeJAIeA/AvxdED9w+uwotcl/ILjm3mgi0=
Subject key identifier:   85:7A:D4:74:EB:6A:85:F5:3D:45:5F:5A:44:D4:C3:78:8C:08:67:32
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       4AE81E9AEF70FEF6D86BE9D9BAD2749E6310C99C
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/600d62a4-e5e5-46cd-9b8b-9a7f3ddeac2d.roa
Signing time:             Tue 07 Jan 2025 00:00:00 +0000
ROA not before:           Tue 07 Jan 2025 00:00:00 +0000
ROA not after:            Tue 11 Feb 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:1ff2:a440::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:e8:1e:9a:ef:70:fe:f6:d8:6b:e9:d9:ba:d2:74:9e:63:10:c9:9c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Jan  7 00:00:00 2025 GMT
            Not After : Feb 11 23:59:59 2025 GMT
        Subject: serialNumber=e51b959a2fe3f0904719c38cffc0e89690cfa59c843a814412e7800dba1448c9, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:2e:f1:43:9b:0a:da:81:6c:4d:8c:81:8f:13:
                    ec:f6:3a:08:0f:d5:31:86:3f:68:a7:78:5b:1f:dc:
                    0f:df:60:53:72:03:f2:5c:18:ff:21:8c:38:3b:22:
                    71:6f:aa:1f:1f:cb:93:db:44:9d:36:57:56:0b:13:
                    19:90:9b:c7:17:7c:9b:46:be:72:95:0d:ea:2b:6f:
                    a2:01:35:72:6c:1e:4d:43:68:7e:2d:34:64:a1:b3:
                    55:4d:09:e0:7a:3f:ff:e9:82:da:52:1e:25:95:77:
                    81:c4:8a:ff:c5:9c:06:9a:43:01:c7:11:f3:d7:3b:
                    8c:f3:43:8e:0e:a3:bc:b0:48:24:89:17:a4:93:91:
                    4c:aa:77:c0:9d:43:6b:58:dc:4c:4b:ef:34:06:9d:
                    b2:c7:2f:2b:13:70:e8:86:e2:ee:18:47:a3:a1:f8:
                    da:7e:b5:85:eb:4e:f9:43:cf:f7:00:f0:a5:85:74:
                    1d:68:d3:6a:af:26:c7:47:5c:77:aa:cd:f4:b0:1a:
                    34:2c:54:8c:b3:e0:a8:dc:21:0a:ee:d3:af:8b:31:
                    2f:5a:4b:00:15:a4:19:cc:84:16:b2:73:5e:0f:73:
                    86:c2:6d:d1:a2:44:b0:20:5e:ae:bc:3b:89:7b:0f:
                    6e:db:27:8e:5e:2b:04:63:65:86:8d:fc:0c:30:b0:
                    02:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:7A:D4:74:EB:6A:85:F5:3D:45:5F:5A:44:D4:C3:78:8C:08:67:32
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/600d62a4-e5e5-46cd-9b8b-9a7f3ddeac2d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1ff2:a440::/48

    Signature Algorithm: sha256WithRSAEncryption
         89:71:3d:36:80:ee:10:55:e9:9f:dd:c7:9b:45:19:30:6c:77:
         4c:be:0e:d8:5d:38:1d:34:03:a6:f5:da:65:44:21:2e:fa:cd:
         e0:42:e8:e5:31:86:ce:08:28:ec:bd:91:43:74:57:98:81:aa:
         39:76:b8:d2:bf:2d:ac:b1:e4:b3:c4:ac:92:04:27:3a:d3:cd:
         0c:d3:b1:cc:0b:b7:16:5c:dd:15:57:cb:ed:9e:11:47:83:30:
         61:45:1c:f1:c8:b3:f2:f4:e6:03:55:59:b0:ee:45:61:81:0d:
         3a:42:36:2a:d8:ca:48:9c:b8:fc:33:83:48:c2:4d:b1:48:20:
         09:12:0d:7a:4c:71:ca:4b:7a:15:96:be:49:f7:51:52:67:c7:
         da:6a:c5:52:d2:ba:b1:23:36:c9:7c:c4:36:a5:33:ad:d0:a9:
         5c:4e:06:98:66:7e:8a:f9:34:1d:38:ca:48:c9:7d:53:98:79:
         55:20:ac:f7:56:c6:44:b2:06:58:b1:a6:f4:f2:a4:1e:8d:63:
         57:8b:2a:17:02:96:13:74:dd:c5:bc:ed:28:77:b5:d1:a4:89:
         74:99:9b:69:02:b0:e9:43:b4:3d:c4:27:c3:72:e4:cb:4c:f4:
         06:1b:7b:fa:1d:02:52:02:ff:12:aa:a7:82:1d:97:b2:a9:1c:
         46:c8:8d:cf
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----